WebSVN – HelenOS-historic – Diff – /kernel/trunk/generic/include/security/cap.h


/*
 * Copyright (C) 2006 Jakub Jermar
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * - Redistributions of source code must retain the above copyright
 *   notice, this list of conditions and the following disclaimer.
 * - Redistributions in binary form must reproduce the above copyright
 *   notice, this list of conditions and the following disclaimer in the
 *   documentation and/or other materials provided with the distribution.
 * - The name of the author may not be used to endorse or promote products
 *   derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */
 
 /** @addtogroup generic
 * @{
 */
/** @file
 */
 
/**
 * @file
 * @brief   Capabilities definitions.
 *
 * Capabilities represent virtual rights that entitle their
 * holder to perform certain security sensitive tasks.
 *
 * Each task can have arbitrary combination of the capabilities
 * defined in this file. Therefore, they are required to be powers
 * of two.
 */
 
#ifndef __CAP_H__
#define __CAP_H__
 
#include <syscall/sysarg64.h>
#include <arch/types.h>
#include <typedefs.h>
 
/**
 * CAP_CAP allows its holder to grant/revoke arbitrary
 * privilege to/from other tasks.
 */
#define CAP_CAP         (1<<0)
 
/**
 * CAP_MEM_MANAGER allows its holder to map physical memory
 * to other tasks.
 */
#define CAP_MEM_MANAGER     (1<<1)
 
/**
 * CAP_IO_MANAGER allows its holder to access I/O space
 * to other tasks.
 */
#define CAP_IO_MANAGER      (1<<2)
 
/**
 * CAP_PREEMPT_CONTROL allows its holder to disable/enable preemption.
 */
#define CAP_PREEMPT_CONTROL (1<<3)
 
/**
 * CAP_IRQ_REG entitles its holder to register IRQ handlers.
 */
#define CAP_IRQ_REG     (1<<4) 
 
typedef __u32 cap_t;
 
extern void cap_set(task_t *t, cap_t caps);
extern cap_t cap_get(task_t *t);
 
extern __native sys_cap_grant(sysarg64_t *uspace_taskid_arg, cap_t caps);
extern __native sys_cap_revoke(sysarg64_t *uspace_taskid_arg, cap_t caps);
 
#endif
 
 /** @}
 */
 
 

Subversion Repositories HelenOS-historic

(root)/kernel/trunk/generic/include/security/cap.h – Rev 1297 → 1702

Rev 1297		Rev 1702
1	/*	1	/*
2	* Copyright (C) 2006 Jakub Jermar	2	* Copyright (C) 2006 Jakub Jermar
3	* All rights reserved.	3	* All rights reserved.
4	*	4	*
5	* Redistribution and use in source and binary forms, with or without	5	* Redistribution and use in source and binary forms, with or without
6	* modification, are permitted provided that the following conditions	6	* modification, are permitted provided that the following conditions
7	* are met:	7	* are met:
8	*	8	*
9	* - Redistributions of source code must retain the above copyright	9	* - Redistributions of source code must retain the above copyright
10	* notice, this list of conditions and the following disclaimer.	10	* notice, this list of conditions and the following disclaimer.
11	* - Redistributions in binary form must reproduce the above copyright	11	* - Redistributions in binary form must reproduce the above copyright
12	* notice, this list of conditions and the following disclaimer in the	12	* notice, this list of conditions and the following disclaimer in the
13	* documentation and/or other materials provided with the distribution.	13	* documentation and/or other materials provided with the distribution.
14	* - The name of the author may not be used to endorse or promote products	14	* - The name of the author may not be used to endorse or promote products
15	* derived from this software without specific prior written permission.	15	* derived from this software without specific prior written permission.
16	*	16	*
17	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR	17	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES	18	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.	19	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,	20	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT	21	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,	22	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY	23	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT	24	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF	25	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.	26	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27	*/	27	*/
28		28
-		29	/** @addtogroup generic
-		30	* @{
-		31	*/
-		32	/** @file
-		33	*/
-		34
29	/**	35	/**
30	* @file cap.h	36	* @file
31	* @brief Capabilities definitions.	37	* @brief Capabilities definitions.
32	*	38	*
33	* Capabilities represent virtual rights that entitle their	39	* Capabilities represent virtual rights that entitle their
34	* holder to perform certain security sensitive tasks.	40	* holder to perform certain security sensitive tasks.
35	*	41	*
36	* Each task can have arbitrary combination of the capabilities	42	* Each task can have arbitrary combination of the capabilities
37	* defined in this file. Therefore, they are required to be powers	43	* defined in this file. Therefore, they are required to be powers
38	* of two.	44	* of two.
39	*/	45	*/
40		46
41	#ifndef __CAP_H__	47	#ifndef __CAP_H__
42	#define __CAP_H__	48	#define __CAP_H__
43		49
44	#include <syscall/sysarg64.h>	50	#include <syscall/sysarg64.h>
45	#include <arch/types.h>	51	#include <arch/types.h>
46	#include <typedefs.h>	52	#include <typedefs.h>
47		53
48	/**	54	/**
49	* CAP_CAP allows its holder to grant/revoke arbitrary	55	* CAP_CAP allows its holder to grant/revoke arbitrary
50	* privilege to/from other tasks.	56	* privilege to/from other tasks.
51	*/	57	*/
52	#define CAP_CAP (1<<0)	58	#define CAP_CAP (1<<0)
53		59
54	/**	60	/**
55	* CAP_MEM_MANAGER allows its holder to map physical memory	61	* CAP_MEM_MANAGER allows its holder to map physical memory
56	* to other tasks.	62	* to other tasks.
57	*/	63	*/
58	#define CAP_MEM_MANAGER (1<<1)	64	#define CAP_MEM_MANAGER (1<<1)
59		65
60	/**	66	/**
61	* CAP_IO_MANAGER allows its holder to access I/O space	67	* CAP_IO_MANAGER allows its holder to access I/O space
62	* to other tasks.	68	* to other tasks.
63	*/	69	*/
64	#define CAP_IO_MANAGER (1<<2)	70	#define CAP_IO_MANAGER (1<<2)
65		71
66	/**	72	/**
67	* CAP_PREEMPT_CONTROL allows its holder to disable/enable preemption.	73	* CAP_PREEMPT_CONTROL allows its holder to disable/enable preemption.
68	*/	74	*/
69	#define CAP_PREEMPT_CONTROL (1<<3)	75	#define CAP_PREEMPT_CONTROL (1<<3)
70		76
71	/**	77	/**
72	* CAP_IRQ_REG entitles its holder to register IRQ handlers.	78	* CAP_IRQ_REG entitles its holder to register IRQ handlers.
73	*/	79	*/
74	#define CAP_IRQ_REG (1<<4)	80	#define CAP_IRQ_REG (1<<4)
75		81
76	typedef __u32 cap_t;	82	typedef __u32 cap_t;
77		83
78	extern void cap_set(task_t *t, cap_t caps);	84	extern void cap_set(task_t *t, cap_t caps);
79	extern cap_t cap_get(task_t *t);	85	extern cap_t cap_get(task_t *t);
80		86
81	extern __native sys_cap_grant(sysarg64_t *uspace_taskid_arg, cap_t caps);	87	extern __native sys_cap_grant(sysarg64_t *uspace_taskid_arg, cap_t caps);
82	extern __native sys_cap_revoke(sysarg64_t *uspace_taskid_arg, cap_t caps);	88	extern __native sys_cap_revoke(sysarg64_t *uspace_taskid_arg, cap_t caps);
83		89
84	#endif	90	#endif
-		91
-		92	/** @}
-		93	*/
-		94
85		95